At 16:36 31.03.2008, you wrote: >>I am seeing the Remote_Storm service in my firewall log. What is it?
>tcp port 1025 >this tool uses this port: http://www.glocksoft.com/trojan_list/Remote_Storm.htm >br >reinhard Of course, any software that uses random ports higher than 1024 can use this and other named ports. That doesn't mean that it is Remote_Storm - it means it is using port 1025. Checkpoint names these ports in the logs as a courtesy, not that they have identified a particular packet as being generated by that particular software. Mick Toothaker -- Reinhard Stich [EMAIL PROTECTED] Internet Security AG, 1150 Wien, Johnstrasse 29 Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
